xepor

Xepor Xepor（发音 /ˈzɛfə/，zephyr）是一个面向逆向工程师和安全研究人员的 Web 路由框架。它提供类似 Flask 的 API，让黑客能够以人性化的编码风格拦截和修改 HTTP 请求和/或 HTTP 响应。 本项目旨在与 mitmproxy 配合使用。用户使用 xepor 编写脚本，并通过 mitmproxy -s your-script.py 在 mitmproxy 内部 运行该脚本。 如果你想从 PoC 迈向生产，从演示（例如...

Hermes-Proxy

Hermes Proxy Hermes Proxy es una aplicación de escritorio para interceptar HTTP/HTTPS construida con Electron y Vite. Captura solicitudes/respuestas, permite reproducir solicitudes y exportar/importar archivos HAR. Características Tabla de tráfico en vivo con detalles de solicitudes/respuestas...

mitm-router

☠ Router de Hombre-en-el-medio 🌐 Convierte cualquier computadora Linux en una red Wi-Fi pública que realiza MITM silenciosamente en todo el tráfico HTTP. Se ejecuta dentro de un contenedor Docker usando hostapd, dnsmasq, y mitmproxy para crear una red inalámbrica honeypot abierta llamada "Public"...

ferret

Ferret El proxy MITM colaborativo para testers de seguridad. Captura tráfico HTTP, anota solicitudes con IA, ejecuta sesiones de caza, reproduce tráfico y realiza un seguimiento de los hallazgos desde una única interfaz. Inicio rápido · Características · Capturas de pantalla · Configuración ·...

ritm

Ruby In The Middle Proxy de intercepción HTTP/HTTPS Ruby in the middle RITM es un proxy de intercepción HTTP/HTTPS con generación y firma de certificados sobre la marcha, que deja al usuario con todo el poder del lenguaje Ruby para interceptar e incluso modificar peticiones y respuestas a su...

InterceptSuite

InterceptSuite !IMPORTANT This repository has been archived. The active InterceptSuite codebase is now closed-source and paid-only. See below for details. About InterceptSuite was created to solve a long-standing problem in security testing - intercepting and inspecting non-HTTP traffic. While...

cdb

Pown CDB Pown CDB 是一个 Chrome 调试协议工具。该工具的主要目标是自动化常见任务，帮助从命令行调试 Web 应用，并主动监控和拦截 HTTP 请求与响应。这在渗透测试及其他类型的安全评估与调查中尤为有用。 截图 --- 致谢 本工具是 secapps.com 开源计划的一部分。 / | / | /\ | \ / | \ \ | / | / /\ \ |/// \| || |/ https://secapps.com 作者 @pdp - https://pdparchitect.github.io/www/ 快速开始 本工具旨在作为 Pown.js...

CVE-2024-23997

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...

zen-desktop v0.25.1

Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...

CVE-2026-81691 openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs

opensslencrypt versions before 1.4.9 fail to validate server URLs in login and registerwithemail functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including clientid, passwords, and JWTs to achieve full keyserve...

CVE-2026-46398

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version 26.0.0, the haxcmsrefreshtoken cookie is set without the Secure flag. This allows it to be transmitted over unencrypted HTTP, making it vulnerable to theft via packet sniffing on t...

CVE-2026-10584 HTTPS Fallback to HTTP in Graph Explorer

Proxy server in Graph Explorer before 3.0.1 falls back to HTTP when certificate files are missing, which might allow remote threat actors to obtain sensitive information via interception of requests intended to be sent over HTTPS. To remediate this issue, users should upgrade to Graph Explorer...

NocoDB: Refresh Token Cookie Set Without `secure` and `sameSite` Flags

Summary The refresh-token cookie was set with httpOnly: true but missing both the secure flag and the sameSite attribute. Over plain HTTP the cookie could be intercepted on the network; without sameSite, browsers attached it to cross-site POSTs, enabling CSRF against the token-refresh endpoint...

CVE-2026-33472 Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass)

Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 contains a logic flaw in CheckHostTrustController.getAuthority that allows an attacker to bypass the security fix for CVE-2026-32303. The method hardcodes the URI scheme based on port number, causin...

EUVD-2013-3916

Malware in sbrugna...

U.S. Dept Of Defense: Sensitive Data Exposure at https://█████████

Sensitive data exposure was discovered in an endpoint of a website, which contained AWS S3 credentials, PATH, IP, and PORTs. This could have allowed an attacker to gain access to sensitive information on the AWS account or perform arbitrary modifications on the AWS resources...

MITM_Intercept - A Little Bit Less Hackish Way To Intercept And Modify non-HTTP Protocols Through Burp And Others

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantastic mitmrelay...

DEBIAN-CVE-2019-25031

Unbound before 1.9.5 allows configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. createunboundadservers.sh is a contributed script from the...

Design/Logic Flaw

The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 contains the administrator account password in plaintext. The page can be intercepted on HTTP...

CVE-2021-28937

Acexy Wireless-N WiFi Repeater REV 1.0 is vulnerable to a password disclosure through its web management interface. The NUCLEI template for CVE-2021-28937 notes that the /password.html page stores the administrator password in plaintext and can be intercepted over HTTP, enabling potential access ...